Static task
static1
Behavioral task
behavioral1
Sample
bd194935f9a84e22fca4bb6c2a762894.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd194935f9a84e22fca4bb6c2a762894.exe
Resource
win10v2004-20240226-en
General
-
Target
bd194935f9a84e22fca4bb6c2a762894
-
Size
725KB
-
MD5
bd194935f9a84e22fca4bb6c2a762894
-
SHA1
062e9d296549f6681bdf73c3a03ef286cc5281e6
-
SHA256
0055fa01ad5e8092d9359a2e20f940f84c323179b1670556a62ddc7e167abcaf
-
SHA512
8c34bb59409659d869fce3e9923a5be04dd11267d88d4581c09c1c1def78159e0b64b28ba566aa3a3753574dac727b6bbda6c5da1f76aea5ad2c8e92af0943c8
-
SSDEEP
12288:xZLEQJF56rE8aV52xj25cEiP/3IWVJ/uxrcpfKFuWauT95mRm:xZDjO/yVrxGm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd194935f9a84e22fca4bb6c2a762894
Files
-
bd194935f9a84e22fca4bb6c2a762894.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 19KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB